A post-exploitation attack method has been uncovered that allows adversaries to read cleartext user passwords for Okta, the identity access and management (IAM) provider — and gain far-ranging access into a corporate environment. Researchers from Mitiga discovered that the IAM system saves Okta user passwords to audit logs if a user accidentally types them in […]
Most people have probably broken their new year’s resolutions by now, but here’s one I plan to stick with: resetting my passwords and rethinking the strategy behind password management solutions. Here’s why. If you work in information security, you already know how severe the LastPass breach of security, announced in late December 2022, was. By […]
For most of us, passwords are the most visible security control we deal with on a regular basis, but we are not very good at it. Whether we as a whole are doing better or worse in terms of password security is still unclear, but one thing is certain: We are clearly overconfident in our […]
Latest Comments